I am getting "lockfile: Sorry, giving up on "/var/lib/shorewall/lock" errors and have not been able to fix this or find a solution. Has anyone else? Scott ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
Scott wrote:> I am getting "lockfile: Sorry, giving up on "/var/lib/shorewall/lock" > errors and have not been able to fix this or find a solution. > Has anyone else? > >rm /var/lib/shorewall/lock -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
Hello, Please check the following URL you will find the solution for the Lock File Issue you have http://www.shorewall.net/oldnews.html Regards Samer>From: Scott <sgrayban@gmail.com> >Reply-To: Shorewall Users <shorewall-users@lists.sourceforge.net> >To: shorewall-users@lists.sourceforge.net >Subject: [Shorewall-users] lock file errors >Date: Tue, 22 May 2007 07:08:50 -0700 >MIME-Version: 1.0 >Received: from lists-outbound.sourceforge.net ([66.35.250.225]) by >bay0-mc11-f1.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Tue, >22 May 2007 07:09:02 -0700 >Received: from sc8-sf-list1-new.sourceforge.net >(sc8-sf-list1-new-b.sourceforge.net [10.3.1.93])by >sc8-sf-spam2.sourceforge.net (Postfix) with ESMTPid 6B2DC12408; Tue, 22 May >2007 07:09:01 -0700 (PDT) >Received: from sc8-sf-mx1-b.sourceforge.net >([10.3.1.91]helo=mail.sourceforge.net)by sc8-sf-list1-new.sourceforge.net >with esmtp (Exim 4.43)id 1HqV2n-00065J-H2 for >shorewall-users@lists.sourceforge.net;Tue, 22 May 2007 07:08:57 -0700 >Received: from nz-out-0506.google.com ([64.233.162.226])by >mail.sourceforge.net with esmtp (Exim 4.44) id 1HqV2n-0008W5-6ffor >shorewall-users@lists.sourceforge.net;Tue, 22 May 2007 07:08:57 -0700 >Received: by nz-out-0506.google.com with SMTP id i11so1100686nzifor ><shorewall-users@lists.sourceforge.net>;Tue, 22 May 2007 07:08:57 -0700 >(PDT) >Received: by 10.114.146.1 with SMTP id t1mr3335101wad.1179842936665;Tue, 22 >May 2007 07:08:56 -0700 (PDT) >Received: from borgnet.us ( [71.32.15.193])by mx.google.com with ESMTP id >m28sm403588poh.2007.05.22.07.08.55;Tue, 22 May 2007 07:08:56 -0700 (PDT) >X-Message-Info: >LsUYwwHHNt1gNKuT259pOkKdyg0x/Ej7rptI099XLPeyk0+fvVVBaDF8Y966KCgI >User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-GB;rv:1.8.1.3) >Gecko/20070326 Thunderbird/2.0.0.0 Mnenhy/0.7.5.0 >X-Enigmail-Version: 0.95.0 >X-Spam-Score: 0.0 (/) >X-Spam-Report: Spam Filtering performed by sourceforge.net.See >http://spamassassin.org/tag/ for more details.Report problems >tohttp://sf.net/tracker/?func=add&group_id=1&atid=2000010.0 RCVD_BY_IP > Received by mail server with no name >X-BeenThere: shorewall-users@lists.sourceforge.net >X-Mailman-Version: 2.1.8 >Precedence: list >List-Id: Shorewall Users <shorewall-users.lists.sourceforge.net> >List-Unsubscribe: ><https://lists.sourceforge.net/lists/listinfo/shorewall-users>, ><mailto:shorewall-users-request@lists.sourceforge.net?subject=unsubscribe> >List-Archive: ><http://sourceforge.net/mailarchive/forum.php?forum=shorewall-users> >List-Post: <mailto:shorewall-users@lists.sourceforge.net> >List-Help: ><mailto:shorewall-users-request@lists.sourceforge.net?subject=help> >List-Subscribe: ><https://lists.sourceforge.net/lists/listinfo/shorewall-users>, ><mailto:shorewall-users-request@lists.sourceforge.net?subject=subscribe> >Errors-To: shorewall-users-bounces@lists.sourceforge.net >Return-Path: shorewall-users-bounces@lists.sourceforge.net >X-OriginalArrivalTime: 22 May 2007 14:09:02.0331 (UTC) >FILETIME=[BFED94B0:01C79C7A] > >I am getting "lockfile: Sorry, giving up on "/var/lib/shorewall/lock" >errors and have not been able to fix this or find a solution. >Has anyone else? > > >Scott > > >------------------------------------------------------------------------- >This SF.net email is sponsored by DB2 Express >Download DB2 Express C - the FREE version of DB2 express and take >control of your XML. No limits. Just data. Click to get it now. >http://sourceforge.net/powerbar/db2/ >_______________________________________________ >Shorewall-users mailing list >Shorewall-users@lists.sourceforge.net >https://lists.sourceforge.net/lists/listinfo/shorewall-users_________________________________________________________________ PC Magazine’s 2007 editors’ choice for best Web mail—award-winning Windows Live Hotmail. http://imagine-windowslive.com/hotmail/?locale=en-us&ocid=TXT_TAGHM_migration_HM_mini_pcmag_0507 --===============0600405822=Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ --===============0600405822=Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
# rm /var/lib/shorewall/lock rm: cannot lstat `/var/lib/shorewall/lock'': No such file or directory Tom Eastep wrote:> Scott wrote: > >> I am getting "lockfile: Sorry, giving up on "/var/lib/shorewall/lock" >> errors and have not been able to fix this or find a solution. >> Has anyone else? >> >> >> > rm /var/lib/shorewall/lock > > -Tom > > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > ------------------------------------------------------------------------ > > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users >------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
samer Y. Azmy wrote:> Hello, > > Please check the following URL > > you will find the solution for the Lock File Issue you have > > http://www.shorewall.net/oldnews.htmlHopefully Scott is running a version of Shorewall more recent than 2.0.3b (unless I''m missing another issue with lock files in the old news). The advice that I gave (simply remove the file) works for the odd case where the lock file doesn''t get removed for some reason. If this is a chronic problem that isn''t solved by simply removing the file then we would need more details such as what version of Shorewall Scott is running and what failure situations are triggering the stale lock file issue. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
# shorewall version 3.2.3 And this lock file pertains to the mutex setting I think. If I lower the the timeout startup is faster -- if I raise it startup takes for ever with the same error. And http://www.shorewall.net/oldnews.html Previously, if neither /etc/shorewall/common nor /etc/shorewall/common.def existed, Shorewall would fail to start and would not remove the lock file Doesn''t apply to me because those files are not there. Tom Eastep wrote:> samer Y. Azmy wrote: > >> Hello, >> >> Please check the following URL >> >> you will find the solution for the Lock File Issue you have >> >> http://www.shorewall.net/oldnews.html >> > > Hopefully Scott is running a version of Shorewall more recent than 2.0.3b > (unless I''m missing another issue with lock files in the old news). > > The advice that I gave (simply remove the file) works for the odd case where > the lock file doesn''t get removed for some reason. If this is a chronic > problem that isn''t solved by simply removing the file then we would need > more details such as what version of Shorewall Scott is running and what > failure situations are triggering the stale lock file issue. > > -Tom > > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > ------------------------------------------------------------------------ > > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users >------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
Scott wrote:> # shorewall version > 3.2.3 > > And this lock file pertains to the mutex setting I think. If I lower the > the timeout startup is faster -- if I raise it startup takes for ever > with the same error. > > And > > http://www.shorewall.net/oldnews.html > > Previously, if neither /etc/shorewall/common nor /etc/shorewall/common.def existed, Shorewall would fail to start and would not remove the lock file > > Doesn''t apply to me because those files are not there.The failure being described occurred when neither file existed -- but that was almost four years ago under Shorewall 1.4.6! There must be some operational event that is causing the lock file to be left around (failures during ''shorewall stop'', ''shorewall start'', etc). Without knowing what that failure is, we''re not going to be of much help. So after each change of Shorewall state, please look to see if the lock file exists and note what the last operation was. Also, which distribution are you running? Thanks, -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
On Tue, May 22, 2007 at 07:36:13AM -0700, Tom Eastep wrote:> There must be some operational event that is causing the lock file to be > left around (failures during ''shorewall stop'', ''shorewall start'', etc). > Without knowing what that failure is, we''re not going to be of much help.However, the problem of stale locks can be fixed in general. Unfortunately lockfile from procmail is pretty crappy, but dotlockfile can handle it (and is lock-safe with lockfile): # remove stale lock if [ -e foo.lock ] if ! dotlockfile -c -p foo.lock rm foo.lock fi fi # create lock dotlockfile -p foo.lock It stores the pid of the caller in the lockfile, and -c -p checks to see whether that process is still running - if it''s not, this is a stale lock which we should delete. ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
Tom Eastep wrote:> Scott wrote: >> # shorewall version >> 3.2.3 >> >> And this lock file pertains to the mutex setting I think. If I lower the >> the timeout startup is faster -- if I raise it startup takes for ever >> with the same error. >> >> And >> >> http://www.shorewall.net/oldnews.html >> >> Previously, if neither /etc/shorewall/common nor /etc/shorewall/common.def existed, Shorewall would fail to start and would not remove the lock file >> >> Doesn''t apply to me because those files are not there. > > The failure being described occurred when neither file existed -- but that > was almost four years ago under Shorewall 1.4.6! > > There must be some operational event that is causing the lock file to be > left around (failures during ''shorewall stop'', ''shorewall start'', etc). > Without knowing what that failure is, we''re not going to be of much help. > > So after each change of Shorewall state, please look to see if the lock file > exists and note what the last operation was. > > Also, which distribution are you running?And do you have procmail installed (is there a ''lockfile'' utility on your system?)? -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
Andrew Suffield wrote:> On Tue, May 22, 2007 at 07:36:13AM -0700, Tom Eastep wrote: >> There must be some operational event that is causing the lock file to be >> left around (failures during ''shorewall stop'', ''shorewall start'', etc). >> Without knowing what that failure is, we''re not going to be of much help. > > However, the problem of stale locks can be fixed in > general. Unfortunately lockfile from procmail is pretty crappy, but > dotlockfile can handle it (and is lock-safe with lockfile): > > # remove stale lock > if [ -e foo.lock ] > if ! dotlockfile -c -p foo.lock > rm foo.lock > fi > fi > > # create lock > dotlockfile -p foo.lock > > It stores the pid of the caller in the lockfile, and -c -p checks to > see whether that process is still running - if it''s not, this is a > stale lock which we should delete.Unfortunately, liblockfile[1] (and hence dotlockfile) doesn''t seem to be available on OpenSuSE although I find it on my Ubuntu systems. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
Mandriva 2007.0 And I have checked to see if the lock file hangs around but as far as I can tell it doesn''t. Would a trace help any? Tom Eastep wrote:> Scott wrote: > >> # shorewall version >> 3.2.3 >> >> And this lock file pertains to the mutex setting I think. If I lower the >> the timeout startup is faster -- if I raise it startup takes for ever >> with the same error. >> >> And >> >> http://www.shorewall.net/oldnews.html >> >> Previously, if neither /etc/shorewall/common nor /etc/shorewall/common.def existed, Shorewall would fail to start and would not remove the lock file >> >> Doesn''t apply to me because those files are not there. >> > > The failure being described occurred when neither file existed -- but that > was almost four years ago under Shorewall 1.4.6! > > There must be some operational event that is causing the lock file to be > left around (failures during ''shorewall stop'', ''shorewall start'', etc). > Without knowing what that failure is, we''re not going to be of much help. > > So after each change of Shorewall state, please look to see if the lock file > exists and note what the last operation was. > > Also, which distribution are you running? > > Thanks, > -Tom > > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > ------------------------------------------------------------------------ > > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users >------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
On Tue, May 22, 2007 at 07:59:46AM -0700, Tom Eastep wrote:> Unfortunately, liblockfile[1] (and hence dotlockfile) doesn''t seem to be > available on OpenSuSE although I find it on my Ubuntu systems.How bizarre... still, it''s painless enough to install, and the embedded distributions would probably find it more palatable than procmail (you don''t even need the library, that''s just the C interface). Might be worth adding as a third option, preferred over the others when present. ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
Scott wrote:> Mandriva 2007.0 > > And I have checked to see if the lock file hangs around but as far as I > can tell it doesn''t. > > Would a trace help any? >It couldn''t hurt. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
Well I think I have figured what is going on after reading the trace file. # This script should not change the firewall configuration directly but # may do so indirectly by running /sbin/shorewall with the ''nolock'' # option. This is stated /etc/shorewall/started so I know its not being called with the ''nolock'' option. How can I fix that or is this a bug with shorewall? I know it works correctly if I do use the ''nolock'' option. Scott Tom Eastep wrote:> Scott wrote: > >> Mandriva 2007.0 >> >> And I have checked to see if the lock file hangs around but as far as I >> can tell it doesn''t. >> >> Would a trace help any? >> >> > > It couldn''t hurt. > > -Tom > > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > ------------------------------------------------------------------------ > > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users >------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
The relevant part of the trace..... + run_iptables -N shorewall + /sbin/iptables -N shorewall + set_state Started ++ date + echo ''Started (Tue May 22 22:10:42 UTC 2007)'' + progress_message2 ''Processing /etc/shorewall/started ...'' + local timestamp+ ''['' 1 -gt 0 '']'' + ''['' -n '''' '']'' + echo ''Processing /etc/shorewall/started ...'' + sh /etc/init.d/he-tunnel restart + sh /etc/shorewall/local-start lockfile: Sorry, giving up on "/var/lib/shorewall/lock" Tom Eastep wrote:> Scott wrote: > >> Mandriva 2007.0 >> >> And I have checked to see if the lock file hangs around but as far as I >> can tell it doesn''t. >> >> Would a trace help any? >> >> > > It couldn''t hurt. > > -Tom > > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > ------------------------------------------------------------------------ > > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users >------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
Scott wrote:> The relevant part of the trace..... > > + run_iptables -N shorewall > + /sbin/iptables -N shorewall > + set_state Started > ++ date > + echo ''Started (Tue May 22 22:10:42 UTC 2007)'' > + progress_message2 ''Processing /etc/shorewall/started ...'' > + local timestamp> + ''['' 1 -gt 0 '']'' > + ''['' -n '''' '']'' > + echo ''Processing /etc/shorewall/started ...'' > + sh /etc/init.d/he-tunnel restart > + sh /etc/shorewall/local-start > lockfile: Sorry, giving up on "/var/lib/shorewall/lock"How do you know what is relevant and what isn''t? -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
Tom Eastep wrote:> Scott wrote: >> The relevant part of the trace..... >> >> + run_iptables -N shorewall >> + /sbin/iptables -N shorewall >> + set_state Started >> ++ date >> + echo ''Started (Tue May 22 22:10:42 UTC 2007)'' >> + progress_message2 ''Processing /etc/shorewall/started ...'' >> + local timestamp>> + ''['' 1 -gt 0 '']'' >> + ''['' -n '''' '']'' >> + echo ''Processing /etc/shorewall/started ...'' >> + sh /etc/init.d/he-tunnel restart >> + sh /etc/shorewall/local-start >> lockfile: Sorry, giving up on "/var/lib/shorewall/lock" > > How do you know what is relevant and what isn''t?And what is in this /etc/shorewall/local-start thingy? -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/